Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File:                     IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier:          Dumo7/A2IcHFDlrlfGYqx4MAAShUqIhSfCKx5H69wgo=
Subject key identifier:   88:6A:07:70:5E:E5:CE:75:C3:16:93:02:9F:0D:F8:2A:87:6D:70:C5
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer:       /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial:       018F3B1C8E64CC5767DD554489B412914531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number:          08DC
Signing time:             Thu 02 May 2024 21:01:18 +0000
Manifest this update:     Thu 02 May 2024 21:01:18 +0000
Manifest next update:     Fri 03 May 2024 21:01:18 +0000
Files and hashes:         1: Dt6rrxVfzPOoWqGJY5TydqUVpNo.roa (hash: J/6QHlMTaNS+SylufhMpQaH1BvnWkPmT4CI1AhjINtg=)
                          2: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: B13e971b0I6swWE9bFclM10anbxWrpHA7YudmW1BTSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:8e:64:cc:57:67:dd:55:44:89:b4:12:91:45:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
        Validity
            Not Before: May  2 21:01:18 2024 GMT
            Not After : May  3 21:01:18 2024 GMT
        Subject: CN=886a07705ee5ce75c31693029f0df82a876d70c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:75:e9:63:7a:6a:8f:ae:07:1b:44:95:e8:
                    68:01:70:24:82:34:29:14:ed:a5:64:a7:23:c9:52:
                    09:fb:64:f9:cf:ee:1a:0a:4a:ff:0d:9d:a0:5e:24:
                    5a:df:43:56:41:e6:ce:bf:19:b9:e6:66:87:9a:f4:
                    ec:3a:09:45:98:ab:52:d3:0b:37:ab:79:49:44:cc:
                    83:4d:31:f3:56:a1:17:9d:5b:90:5b:48:00:5f:3c:
                    42:3e:bc:3f:3f:d3:72:b5:4e:0f:51:1f:81:12:14:
                    7f:16:5f:33:3b:d8:cd:fd:09:64:bd:4f:56:a2:04:
                    2e:c7:7e:1c:11:34:fb:d8:7b:48:19:51:f1:f4:e5:
                    89:1e:6c:af:52:ac:01:5c:df:36:5f:47:71:90:fb:
                    f1:13:7c:1f:79:b5:f1:62:f1:6f:8c:b6:ad:2a:b8:
                    0b:0d:63:e3:49:60:85:e5:d3:c4:cf:f0:9e:70:66:
                    c5:b9:1a:68:29:58:eb:ea:84:c4:92:94:da:8c:d1:
                    ea:30:09:62:58:3d:73:e6:b5:af:f2:d0:9f:23:f5:
                    7b:56:89:06:27:8a:b3:9a:4a:e4:92:9a:6c:a4:35:
                    3c:12:41:62:fb:ee:55:79:0e:cc:5a:45:cd:49:2c:
                    e6:d7:39:45:4f:58:dd:64:61:ad:86:65:f2:23:ab:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6A:07:70:5E:E5:CE:75:C3:16:93:02:9F:0D:F8:2A:87:6D:70:C5
            X509v3 Authority Key Identifier:
                keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:65:7d:df:08:2d:ae:44:bf:5e:84:29:81:44:ee:7b:4e:68:
         e8:9b:d6:0b:ab:1a:c4:4a:5f:70:18:23:89:a3:e3:bf:07:0f:
         d1:95:21:de:d5:38:98:f2:1c:45:de:98:1f:31:e8:cf:5b:f9:
         d2:86:6c:1b:be:19:de:5b:25:64:ab:18:ff:e5:ec:63:a7:bb:
         71:4e:c0:fe:3c:ae:5f:3c:84:1a:c6:88:bd:d4:d0:c3:b7:eb:
         a6:8e:c0:90:5f:5e:da:98:18:3c:92:02:90:d3:2a:5c:66:a2:
         c9:79:65:63:7b:5d:0a:a0:8d:df:ea:a6:ef:2b:11:7c:b7:16:
         aa:d0:73:4a:9e:20:d4:48:8e:da:d6:7d:b0:fe:9b:48:80:f5:
         47:85:f6:40:84:88:94:74:b4:1f:0a:61:7c:54:0f:cc:00:2c:
         3b:9c:ed:33:d2:cc:a7:9d:d3:4e:45:21:62:06:10:c7:78:5b:
         24:8f:08:68:02:3c:bb:05:43:dd:5d:ae:17:55:2e:40:64:f2:
         24:89:97:2c:4b:d8:db:8c:09:09:ed:c1:d8:5d:4c:ab:f5:62:
         5c:5b:a8:fc:f2:22:06:e5:57:82:f4:aa:c2:2b:1f:93:b8:89:
         7d:77:8c:2c:4f:4b:ad:fc:74:09:08:42:7e:7b:52:85:e5:3b:
         f7:8c:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:09:19 2024 by rpki-client on console-ams.rpki-client.org